<security> of <ws2007HttpBinding>

Artikkeli
08/16/2022

Represents the security settings used with the <ws2007HttpBinding> element.

<configuration>
  <system.serviceModel>
    <bindings>
      <ws2007HttpBinding>
        <binding>
          <security>

Syntax

<system.serviceModel>
  <bindings>
    <ws2007HttpBinding>
      <binding name = "String">
        <security mode="None/Message/Transport/TransportWithMessageCredential">
          <transport>
          </transport>
          <message>
          </message>
        </security>
      </binding>
    </ws2007HttpBinding>
  </bindings>
</system.serviceModel>

Attributes and Elements

The following sections describe attributes, child elements, and parent elements.

Attributes

Attribute	Description
`mode`	- Optional. Specifies the type of security that is applied. The default is `Message`. This attribute is of type SecurityMode.

Mode Attribute

Value	Description
`None`	Security is disabled.
`Transport`	Security is provided using HTTPS. The service must be configured with Secure Sockets Layer (SSL) certificates. The message is entirely secured using HTTPS and the service is authenticated by the client using the service’s SSL certificate. The client authentication is controlled through the `ClientCredentials` attribute of the <transport> element.
`Message`	Security is provided using SOAP message security. By default, the SOAP body is encrypted and signed. This mode offers a variety of features, such as whether the service credentials are available at the client out of band, the algorithm suite to use, and what level of protection to apply to the message body through the SecurityMessageProperty. Client authentication is performed once for each session and the results of authentication are cached for the duration of the session.
`TransportWithMessageCredential`	In this mode, HTTPS provides integrity, confidentiality, and server authentication, and SOAP message security provides client authentication. By default, client authentication is performed once for each session and the results of authentication are cached for the duration of the session.

Child Elements

Element	Description
<transport>	Defines the transport security settings. This element corresponds to the HttpTransportSecurityElement type. These settings are applied only when the mode is set to Transport.
<message>	Defines the security settings for the message. This element corresponds to the MessageSecurityOverHttpElement type. These settings are not applied when the mode is set to Transport.

Parent Elements

Element	Description
<ws2007HttpBinding>	A secure binding for HTTP transport applications.

Remarks

This element is designed for interoperation with services that implement WS-* specifications. The transport security for this binding is Secure Sockets Layer (SSL) over HTTP, or HTTPS.

Jaa